Schwachstellen

Kritische Schwachstellen, die das Gate schon kennt.

Alle sechs Stunden holt Attestkeep die Trivy Vulnerability Database, dieselbe, die der Scanner in Ihrem Cluster liest. Das sind die Einträge, die die Database diese Woche als kritisch eingestuft hat, und wann. Nicht, wann die Nachricht kam: wann das Gate es wusste.

Database zuletzt aktualisiert27. Okt. 2026, 19:17 UTC

29kritisch, letzte 7 Tage 411hoch, letzte 7 Tage 649mittel, letzte 7 Tage 145niedrig, letzte 7 Tage

ID	Schwachstelle	Eingestuft seit	Veröffentlicht
CVE-2026-95502 mittel	grafana: grafana: Denial of Service via oversized Git Sync responses	27. Okt. 2026Build 01:25 UTC	13. Okt. 2026
CVE-2026-107819 mittel	mariadb-connector-c: mariadb-connector-c: Information disclosure via improper TLS hostname verification	27. Okt. 2026Build 01:25 UTC	9. Okt. 2026
CVE-2026-107817 mittel	mariadb: mariadb: Denial of Service via invalid binary JSON in mysql_json plugin	27. Okt. 2026Build 01:25 UTC	9. Okt. 2026
CVE-2026-106061 mittel	gimp: GIMP: heap buffer over-read in X cursor (XMC) thumbnail loader on crafted file	27. Okt. 2026Build 01:25 UTC	7. Okt. 2026
CVE-2026-80048 mittel	sssd: sssd-kcm: Local Denial of Service via excessive memory preallocation	27. Okt. 2026Build 01:25 UTC	7. Okt. 2026
CVE-2026-104046 mittel	sssd: sssd: Denial of Service via incomplete Identity Provider authentication requests	27. Okt. 2026Build 01:25 UTC	6. Okt. 2026
CVE-2026-106063 mittel	GIMP: GIMP: heap buffer overflow in DICOM export on oversized image dimensions	27. Okt. 2026Build 01:25 UTC	6. Okt. 2026
CVE-2026-104047 mittel	sssd: sssd: Information disclosure via query injection in Entra ID lookups	27. Okt. 2026Build 01:25 UTC	6. Okt. 2026
CVE-2026-98359 mittel	kernel: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed	27. Okt. 2026Build 01:25 UTC	6. Okt. 2026
CVE-2026-98169 mittel	kernel: smb: client: fix potential OOB read in smb3_enum_snapshots()	27. Okt. 2026Build 01:25 UTC	6. Okt. 2026
CVE-2026-92821 mittel	sssd: SSSD: Access control bypass via premature LDAP access rule evaluation	27. Okt. 2026Build 01:25 UTC	6. Okt. 2026
CVE-2026-104038 mittel	sssd: sssd: Denial of Service via missing SID extension in certificate mapping	27. Okt. 2026Build 01:25 UTC	6. Okt. 2026
CVE-2026-104036 mittel	sssd: sssd: Denial of service via out-of-bounds write in NFS idmap plugin	27. Okt. 2026Build 01:25 UTC	6. Okt. 2026
CVE-2026-104034 mittel	sssd: SSSD: Denial of Service via use-after-free in KCM ticket renewal	27. Okt. 2026Build 01:25 UTC	6. Okt. 2026
CVE-2026-104032 mittel	sssd: sssd: Denial of Service via unprivileged autofs cache invalidation	27. Okt. 2026Build 01:25 UTC	6. Okt. 2026
CVE-2026-104031 mittel	sssd: SSSD: Denial of Service via memory exhaustion in autofs responder	27. Okt. 2026Build 01:25 UTC	6. Okt. 2026
CVE-2026-104030 mittel	sssd: sssd: Denial of Service via out-of-bounds read during passkey parsing	27. Okt. 2026Build 01:25 UTC	5. Okt. 2026
CVE-2026-103531 mittel	opensc: opensc: Arbitrary code execution via stack-based buffer overflow in card-setcos	27. Okt. 2026Build 01:25 UTC	1. Okt. 2026
CVE-2026-103242 mittel	rpm: Heap-based buffer overflow write in hex2binv() via a mistyped RPMTAG_FILESIGNATURES header tag	27. Okt. 2026Build 01:25 UTC	30. Sept. 2026
CVE-2026-95520 mittel	rpm: rpm: integer overflow in iterReadArchiveNext() leads to heap-based buffer overflow when parsing untrusted RPM packages	27. Okt. 2026Build 01:25 UTC	29. Sept. 2026
CVE-2026-98120 mittel	kernel: netfs: Fix subreq ref leak	27. Okt. 2026Build 01:25 UTC	25. Sept. 2026
CVE-2026-98119 mittel	kernel: netfs: break unbuffered write when netfs_alloc_subrequest() fails	27. Okt. 2026Build 01:25 UTC	25. Sept. 2026
CVE-2026-88383 mittel	libical: libical: Denial of Service via crafted iCalendar property parsing	27. Okt. 2026Build 01:25 UTC	24. Sept. 2026
CVE-2026-49919 mittel	freetype: Integer overflow in FreeType tt_face_colr_blend_layer() leads to heap buffer overflow during COLR font rendering	27. Okt. 2026Build 01:25 UTC	8. Sept. 2026
CVE-2026-116196 mittel	github.com/rclone/rclone: rclone: Information disclosure via HTTP redirects in B2 backend	26. Okt. 2026Build 19:14 UTC	25. Okt. 2026
CVE-2026-116195 mittel	github.com/rclone/rclone: rclone: Path traversal via link suffix trimming	26. Okt. 2026Build 19:14 UTC	25. Okt. 2026
CVE-2026-116194 mittel	github.com/rclone/rclone: rclone: Sensitive data disclosure via CSRF in pCloud OAuth callback	26. Okt. 2026Build 19:14 UTC	25. Okt. 2026
CVE-2026-116192 mittel	github.com/rclone/rclone: rclone: Information disclosure via Server-Side Request Forgery in rc-serve	26. Okt. 2026Build 19:14 UTC	25. Okt. 2026
CVE-2026-116187 mittel	github.com/rclone/rclone: rclone: Cross-tenant upload tampering via authorization bypass in S3 authentication proxy	26. Okt. 2026Build 19:14 UTC	25. Okt. 2026
CVE-2026-80785 mittel	kernel: fbdev: serialize mode sysfs access with lock_fb_info()	26. Okt. 2026Build 19:14 UTC	4. Sept. 2026
CVE-2026-74690 mittel	kernel: s390/ism: Fix UAF of sba and ieq during ism_dev_exit()	26. Okt. 2026Build 19:14 UTC	22. Aug. 2026
CVE-2026-63862 mittel	kernel: PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found	26. Okt. 2026Build 19:14 UTC	19. Juli 2026
CVE-2026-116470 mittel	keycloak-services: keycloak-services: SCIM user listing endpoint returns full PII without per-user VIEW authorization check	26. Okt. 2026Build 19:14 UTC
GHSA-x65r-p6hf-94hv mittel	Missing authorization on Avo association show endpoint exposes related records	26. Okt. 2026Build 19:14 UTC
openSUSE-SU-2026:12259-1 mittel	MozillaFirefox-158.0.1-1.1 on GA media	26. Okt. 2026Build 19:14 UTC
openSUSE-SU-2026:12260-1 mittel	buildpacks-cli-0.40.10-1.1 on GA media	26. Okt. 2026Build 19:14 UTC
openSUSE-SU-2026:12263-1 mittel	nvidia-open-driver-G06-signed-check-580.196.07-1.1 on GA media	26. Okt. 2026Build 19:14 UTC
openSUSE-SU-2026:12265-1 mittel	python313-wyoming-1.10.2-1.1 on GA media	26. Okt. 2026Build 19:14 UTC
openSUSE-SU-2026:12266-1 mittel	libvips-devel-8.18.7-1.1 on GA media	26. Okt. 2026Build 19:14 UTC
openSUSE-SU-2026:22163-1 mittel	Security update for rabbitmq-server	26. Okt. 2026Build 19:14 UTC
openSUSE-SU-2026:22165-1 mittel	Security update for libmodplug	26. Okt. 2026Build 19:14 UTC
CVE-2026-112768 mittel	Parse Server before 8.6.99 and 9.x before 9.10.3 Information Disclosure via User Update	26. Okt. 2026Build 14:38 UTC	19. Okt. 2026
CVE-2026-116181 mittel	vllm: vllm: Denial of Service via unvalidated stop token identifiers	26. Okt. 2026Build 07:15 UTC	25. Okt. 2026
CVE-2026-116180 mittel	vllm: vLLM: Denial of Service via uninitialized log probability tensors	26. Okt. 2026Build 07:15 UTC	25. Okt. 2026
CVE-2026-116178 mittel	vllm: vLLM: Denial of Service via inconsistent multimodal metadata	26. Okt. 2026Build 07:15 UTC	25. Okt. 2026
CVE-2026-116175 mittel	vllm: vllm: Denial of Service via audio decompression bomb in chat completions	26. Okt. 2026Build 07:15 UTC	25. Okt. 2026
CVE-2026-116174 mittel	vllm: vllm: Denial of Service via invalid prompt token IDs in gRPC service	26. Okt. 2026Build 07:15 UTC	25. Okt. 2026
CVE-2026-116173 mittel	vllm: vllm: Denial of Service via excessive candidate token IDs in gRPC interface	26. Okt. 2026Build 07:15 UTC	25. Okt. 2026
CVE-2026-116172 mittel	vllm: vLLM: Denial of Service via improper input validation in Rust gRPC interface	26. Okt. 2026Build 07:15 UTC	25. Okt. 2026
CVE-2026-116155 mittel	ImageMagick: ImageMagick: Denial of Service via crafted XMP profile memory leak	26. Okt. 2026Build 07:15 UTC	25. Okt. 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.